{"id":"CVE-2019-3686","details":"openQA before commit c172e8883d8f32fced5e02f9b6faaacc913df27b was vulnerable to XSS in the distri and version parameter. This was reported through the bug bounty program of Offensive Security","modified":"2026-10-24T10:31:06.970866511Z","published":"2020-01-17T13:15:11.420Z","database_specific":{"unresolved_ranges":[{"vendor_product":"suse:openqa","cpes":["cpe:2.3:a:suse:openqa:*:*:*:*:*:*:*:*"],"extracted_events":[{"range":[{"fixed":"2019-07-22"}],"source":"CPE_RANGE"}]}]},"references":[{"type":"REPORT","url":"https://bugzilla.suse.com/show_bug.cgi?id=1142849"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/os-autoinst/openqa","events":[{"introduced":"0"},{"fixed":"c172e8883d8f32fced5e02f9b6faaacc913df27b"}],"database_specific":{"extracted_events":[{"range":[{"introduced":"0"},{"fixed":"c172e8883d8f32fced5e02f9b6faaacc913df27b"}],"source":"DESCRIPTION"}]}}],"versions":["4.5.1528009330.e68ebe2b","4.5.1515523690.e76578fb","4.5.1510305342.31ec90c3","4.5.1509097496.8b8e8e20","4.3","4.2","4.1","4.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-3686.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"}]}